4.3

CVE-2014-8150

CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 7.0
Haxx ≫ Libcurl Version 6.0
Haxx ≫ Libcurl Version 6.1
Haxx ≫ Libcurl Version 6.1 Update beta
Haxx ≫ Libcurl Version 6.2
Haxx ≫ Libcurl Version 6.3
Haxx ≫ Libcurl Version 6.3.1
Haxx ≫ Libcurl Version 6.4
Haxx ≫ Libcurl Version 6.5
Haxx ≫ Libcurl Version 6.5.1
Haxx ≫ Libcurl Version 6.5.2
Haxx ≫ Libcurl Version 7.1
Haxx ≫ Libcurl Version 7.1.1
Haxx ≫ Libcurl Version 7.2
Haxx ≫ Libcurl Version 7.2.1
Haxx ≫ Libcurl Version 7.3
Haxx ≫ Libcurl Version 7.4
Haxx ≫ Libcurl Version 7.4.1
Haxx ≫ Libcurl Version 7.4.2
Haxx ≫ Libcurl Version 7.5
Haxx ≫ Libcurl Version 7.5.1
Haxx ≫ Libcurl Version 7.5.2
Haxx ≫ Libcurl Version 7.6
Haxx ≫ Libcurl Version 7.6.1
Haxx ≫ Libcurl Version 7.7
Haxx ≫ Libcurl Version 7.7.1
Haxx ≫ Libcurl Version 7.7.2
Haxx ≫ Libcurl Version 7.7.3
Haxx ≫ Libcurl Version 7.8
Haxx ≫ Libcurl Version 7.8.1
Haxx ≫ Libcurl Version 7.9
Haxx ≫ Libcurl Version 7.9.1
Haxx ≫ Libcurl Version 7.9.2
Haxx ≫ Libcurl Version 7.9.3
Haxx ≫ Libcurl Version 7.9.4
Haxx ≫ Libcurl Version 7.9.5
Haxx ≫ Libcurl Version 7.9.6
Haxx ≫ Libcurl Version 7.9.7
Haxx ≫ Libcurl Version 7.9.8
Haxx ≫ Libcurl Version 7.10
Haxx ≫ Libcurl Version 7.10.1
Haxx ≫ Libcurl Version 7.10.2
Haxx ≫ Libcurl Version 7.10.3
Haxx ≫ Libcurl Version 7.10.4
Haxx ≫ Libcurl Version 7.10.5
Haxx ≫ Libcurl Version 7.10.6
Haxx ≫ Libcurl Version 7.10.7
Haxx ≫ Libcurl Version 7.10.8
Haxx ≫ Libcurl Version 7.11.0
Haxx ≫ Libcurl Version 7.11.1
Haxx ≫ Libcurl Version 7.11.2
Haxx ≫ Libcurl Version 7.12.0
Haxx ≫ Libcurl Version 7.12.1
Haxx ≫ Libcurl Version 7.12.2
Haxx ≫ Libcurl Version 7.12.3
Haxx ≫ Libcurl Version 7.13.0
Haxx ≫ Libcurl Version 7.13.1
Haxx ≫ Libcurl Version 7.13.2
Haxx ≫ Libcurl Version 7.14.0
Haxx ≫ Libcurl Version 7.14.1
Haxx ≫ Libcurl Version 7.15.0
Haxx ≫ Libcurl Version 7.15.1
Haxx ≫ Libcurl Version 7.15.2
Haxx ≫ Libcurl Version 7.15.3
Haxx ≫ Libcurl Version 7.15.4
Haxx ≫ Libcurl Version 7.15.5
Haxx ≫ Libcurl Version 7.16.0
Haxx ≫ Libcurl Version 7.16.1
Haxx ≫ Libcurl Version 7.16.2
Haxx ≫ Libcurl Version 7.16.3
Haxx ≫ Libcurl Version 7.16.4
Haxx ≫ Libcurl Version 7.17.0
Haxx ≫ Libcurl Version 7.17.1
Haxx ≫ Libcurl Version 7.18.0
Haxx ≫ Libcurl Version 7.18.1
Haxx ≫ Libcurl Version 7.18.2
Haxx ≫ Libcurl Version 7.19.0
Haxx ≫ Libcurl Version 7.19.1
Haxx ≫ Libcurl Version 7.19.2
Haxx ≫ Libcurl Version 7.19.3
Haxx ≫ Libcurl Version 7.19.4
Haxx ≫ Libcurl Version 7.19.5
Haxx ≫ Libcurl Version 7.19.6
Haxx ≫ Libcurl Version 7.19.7
Haxx ≫ Libcurl Version 7.20.0
Haxx ≫ Libcurl Version 7.20.1
Haxx ≫ Libcurl Version 7.21.0
Haxx ≫ Libcurl Version 7.21.1
Haxx ≫ Libcurl Version 7.21.2
Haxx ≫ Libcurl Version 7.21.3
Haxx ≫ Libcurl Version 7.21.4
Haxx ≫ Libcurl Version 7.21.5
Haxx ≫ Libcurl Version 7.21.6
Haxx ≫ Libcurl Version 7.21.7
Haxx ≫ Libcurl Version 7.22.0
Haxx ≫ Libcurl Version 7.23.0
Haxx ≫ Libcurl Version 7.23.1
Haxx ≫ Libcurl Version 7.24.0
Haxx ≫ Libcurl Version 7.25.0
Haxx ≫ Libcurl Version 7.26.0
Haxx ≫ Libcurl Version 7.27.0
Haxx ≫ Libcurl Version 7.28.0
Haxx ≫ Libcurl Version 7.28.1
Haxx ≫ Libcurl Version 7.29.0
Haxx ≫ Libcurl Version 7.30.0
Haxx ≫ Libcurl Version 7.31.0
Haxx ≫ Libcurl Version 7.32.0
Haxx ≫ Libcurl Version 7.33.0
Haxx ≫ Libcurl Version 7.34.0
Haxx ≫ Libcurl Version 7.35.0
Haxx ≫ Libcurl Version 7.36.0
Haxx ≫ Libcurl Version 7.37.0
Haxx ≫ Libcurl Version 7.37.1
Haxx ≫ Libcurl Version 7.38.0
Haxx ≫ Libcurl Version 7.39
Canonical ≫ Ubuntu Linux Version 10.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.81% 0.932
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
https://support.apple.com/kb/HT205031
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://lists.opensuse.org/opensuse-updates/2015-02/msg00040.html
http://rhn.redhat.com/errata/RHSA-2015-1254.html
http://advisories.mageia.org/MGASA-2015-0020.html
http://curl.haxx.se/docs/adv_20150108B.html
Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147856.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147876.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html
http://secunia.com/advisories/61925
http://secunia.com/advisories/62075
http://secunia.com/advisories/62361
http://www.debian.org/security/2015/dsa-3122
http://www.mandriva.com/security/advisories?name=MDVSA-2015:021
http://www.securityfocus.com/bid/71964
http://www.securitytracker.com/id/1032768
http://www.ubuntu.com/usn/USN-2474-1
https://kc.mcafee.com/corporate/index?page=content&id=SB10131
https://security.gentoo.org/glsa/201701-47